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Abstract 

We present here algorithmic cooling (via polarization-heat-bath) — a powerful method for obtain- 
ing a large number of highly polarized spins in liquid nuclear-spin systems at finite temperature. Given 
that spin-half states represent (quantum) bits, algorithmic cooling cleans dirty bits beyond the Shan- 
non's bound on data compression, by employing a set of rapidly thermal-relaxing bits. Such auxiliary 
bits could be implemented using spins that rapidly get into thermal equilibrium with the environment, 
e.g., electron spins. 

Cooling spins to a very low temperature without cooling the environment could lead to a break- 
through in nuclear magnetic resonance experiments, and our "spin-refrigerating" method suggests that 
this is possible. 

The scaling of NMR ensemble computers is probably the main obstacle to building useful quantum 
computing devices, and our spin-refrigerating method suggests that this problem can be resolved. 
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1 Introduction 



Ensemble computing is based on a model comprised of a macroscopic number of computers, where the 
same set of operations is performed simultaneously on all the computers. The concept of ensemble com- 
puting became very important recently, due to the fact that NMR quantum computers [|l|] perform ensemble 
computing. NMR quantum computing has already succeeded in performing complex operations involving 
up to 7-8 qubits (quantum bits), and therefore, NMR quantum computers are currently the most successful 
quantum computing devices. 

In NMR quantum computing each computer is represented by a single molecule, and the qubits of the 
computer are represented by the nuclear spins embedded in a single molecule. A macroscopic number of 
identical molecules is available in a bulk system, and these molecules act as many computers performing 
the same computation in parallel. To perform a desired computation, the same sequence of external pulses 
is applied to all the molecules/computers. Finally, a measurement of the state of a single qubit is performed 
by averaging over all computers/molecules to read out the output on a particular bit on all computers. Due 
to the use of a macroscopic number of molecules, the output is a noticeable magnetic signal. It has been 
shown that almost all known quantum algorithms designed for the usual single-computer model, can be 
adapted to be implemented on ensemble computers [||], and in particular, these ensemble computers can 
perform fast factorization of large numbers [^] and fast data-base search 

Unfortunately, the wide-spread belief is that even though ensemble quantum computation is a powerful 
scheme for demonstrating fundamental quantum phenomena, it is not scalable (see for instance |6|, ^). 
In particular, in the current approaches to ensemble computing, identifying the state of the computer 
requires sensing signals with signal-to-noise ratios that are exponentially small in n, the number of qubits 
in the system. We refer to this well-known problem as the scaling problem. The origin of the scaling 
problem is explained in the following. 

The initial state of each qubit, when averaged over all computers (a macroscopic number), is highly 
mixed, with only a small bias towards the zero state. At thermal equilibrium the state is 



where the initial bias, eo, is mainly determined by the magnetic field and the temperature, but also depends 
on the structure and the electronic configurations of the molecule. For an ideal system, one has eo = 



it is |1) with probability zero. For a totally mixed system, eo = 0, hence the probabilities of |0) and |1) are 
both equal to half. We also define 5q = (1 — eo)/2 to be the initial error probability. Typically, eo is around 
10~^ for the liquid NMR systems in use [|l|], and can probably be improved (increased) a great deal in the 
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, meaning that the state is |0) with probability one, and 
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near future. Especially promising directions are the use of liquid crystal NMR for quantum computing 
and the use of a SWAP operation for the nuclear spin and the electron spin known as ENDOR technique [^]. 
The state of an n-qubit system in the ideal case is pj^^^i = |0„)(0„| with |0„) = |0) (8) |0) (8) • • • ^ |0) (a 
tensor product of n single qubit states). In general, the initial state of an n-qubit liquid NMR system can 
be represented as a tensor product of states of the individual qubits: 

Pfni! = Peo^^ Peo® Peo ■ (2) 

This state can also be written as Yl'i=o^ ^« K) (^1' ^ mixture of all states \i) — the basis vectors of the system, 
and i (for n qubits) is a n-bit binary string. E.g., for two qubits, Pqo = (1 + £o)^/4. In fact, the initial 
bias is not the same on each qubit [|lO|], but as long as the differences between these biases are small we 
can ignore this fact in our analysis. The analysis we do later on is correct if we replace all these slightly 
different initial biases by their minimum value and call this value eq. 

Currently, researchers use the so-called "pseudo pure state (PPS)" technique to perform computations 
with such highly mixed initial states. In this technique, the initial mixed density matrix is transformed to a 
state 

pi% ^ {1-P)I + P\^){4^1 (3) 

which is a mixture of the totally-mixed state I = (with l2«, the identity matrix of order 2"), and 

a pure state lip) initially set to be |0n) in our case. Such a state is called a pseudo-pure state. Unitary 
operations then leave the totally mixed state unchanged, but do affect the pure state part, to perform the 
desired computation via entanglement of the pure part (which we refer to as "pseudo-entanglement"). 
Finally, the state of the ensemble-computer is measured. If the probability p of the pure state is not 
too small, then the pure part of the state yields the expectation value for each qubit, an outcome which 
is sufficient for performing quantum computing which is as powerful as the standard (non-ensemble) 
quantum computing [Q]. Unfortunately, in all the existing PPS methods 

and hence, p scales exponentially badly with n (the number of computation qubits), leading to an expo- 
nentially small signal-to-noise ratio. As a result, an exponential number of computers (molecules) are 
required in order to read the signal. With eo in the range one might still hope to obtain a 

20-qubit computer, since then p (approximately 10~^ — 10^^) can still lead to an observed signal when an 
Avogadro number of computers are used. But one cannot hope to go beyond a 50-qubit computer, since 
then, p is approximately 10^^'^ — 10^^^, which is smaller than the standard deviation in reading the result 
(and, even with perfect devices, the signal cannot be read). 
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The exponential advantage of quantum computers over classical ones ^ is totally lost in these NMR 
computing devices since an exponential number of molecules/computers is required for the computation, 
and therefore the scaling problem must be resolved in order to achieve any useful NMR quantum com- 
puting. This scaling problem (plus the assumption that quantum computing requires entanglement, and 
cannot rely on pseudo-entanglement) has led several researchers to suggest that the current NMR quantum 
computers are no more than classical simulators of quantum computers Actually, the important con- 
tribution of is the result that in some neighborhood of the totally-mixed state, all states are separable; 
hence, some pseudo-entanglement states contain no entanglement. But this work does not prove (and does 
not claim to prove) that current NMR quantum computers do not perform quantum computation. We, in 
contrast, conjecture that the PPS technique and the work of form the first step in proving that quantum 
computing without entanglement is possible. 

The first important step in resolving the scaling problem is to understand that the scaling problem is 
not an inherent characteristic of ensemble computers but is an artifact of the existing PPS methods. In 
fact, the original highly mixed state contains a great deal of information, and this can be seen by rotating 
each qubit separately and finally measuring the qubits. However, the existing methods of transforming the 
highly mixed state into the PPS cause the scaling problem, by losing information on purpose. Furthermore, 
it is important to mention that for any n, there is a range of bias, e, not close to zero, where the currently 
existing methods for creating PPS work just fine. In order to be in that range, the state of each qubit must 
be almost pure: e = 1 — 26, where 6, the error probability, satisfies 6 <^ I (actually 6 ^ 0.2 is already 
useful). Then p scales well: 

As long as 6 ^ 0{l/n), the probability p is sufficiently large for all practical purposes, thus much larger 
n's can still be used. Furthermore, any n can be used if one can control (5 as a function of n. The PPS 
technique, the loss of information, and the scaling problem are described in more detail in appendix ^. 

Instead of converting the initial state (^) to a PPS (||), we perform a "purification" transformation that 
takes a subset, m (with m < n), of the qubits to a final state of the form 

where edes is some desired bias close enough to 1. This state with a higher bias can then be transformed 
into a scalable PPS, /Oppg- For example, we shall demonstrate how to achieve (via algorithmic cooling) 
6 » 0.2, which allows n in the range 20-50 qubits, and 6 ^ 0.04, which allows n in the range of 50-200 
qubits. 

In this paper we present a purification process which uses concepts from information theory (data 
compression) and from thermodynamics (heat bath, thermal relaxation), and which resolves the scaling 



4 



problem. Our "information-theoretic" purification is totally classical, hence the density matrices are treated 
as classical probability distributions, and no explicit quantum effects are taken into consideration. In earlier 



work, Schulman and Vazirani [11] already demonstrated novel compression-based (and not PPS-based) 
alternative NMR computing, which does not suffer from the scaling problem. Their scheme is based on 
information theoretic tools, and it leads to Eq. (^). However, the Shannon bound on the purification ability 
prevents purifying any reasonable fraction of bits for small values of eo: m ^ ^^^^ Section g), 

meaning that thousands of bits are required in order to get one or a few purified bits (with a reasonable 
probability of success). More explicitly, any entropy-preserving purification scheme cannot currently be 
useful for NMR computation. 

We present here the first cooling scheme that goes beyond the Shannon bound, an algorithmic cooling 
via polarization-heat-bath, or in short, algorithmic cooling. This cooling scheme, presented in Section ||, 
purifies a large fraction of the bits initially set in a highly mixed state, and hence resolves the scaling 
problem. Algorithmic cooling can bypass the Shannon bound since it does not preserve entropy of the 
system, but removes entropy into a heat bath at a temperature /?o- In order to pump entropy into the 
polarization heat bath, algorithmic cooling demands the existence and the mutual processing of two types 



of qubits []12[]: computation bits and bits which Rapidly Reach Thermal Relaxation (RRTR bits). The 
computation bits are assumed to have a very long relaxation time, Ziomput-bits, and they are used for 
the computation, and the RRTR bits are assumed to have a much shorter relaxation time, Trrtr, hence 
they rapidly get into thermal equilibrium with the environment (a heat bath) at a temperature of (3q. Since 
the RRTR bits are defined via their spin (to be or 1), the heat bath is actually a spin-polarization heat 
bath. In our algorithmic cooling, a standard compression is performed on the computation bits, purifying 
(cooling) some while concentrating the entropy (heating) the others, to heat them above Pq. Then the 
hotter bits are replaced with the RRTR bits, which are at the heat-bath temperature j3o, resulting in an 
overall cooling of the system. Repeating the process many times via a recursive algorithm, any final 
close-to-zero "temperature" (that is, any final bias) can in principle be achieved 

Algorithmic cooling provides a new challenge for the experimentalists, since such processing of two 
types of quantum bits (two different spin systems) is highly nontrivial. The currently existing experimental 
technologies, and the new "experimental challenge" of combining them in order to perform algorithmic 
cooling, are explained further in Section ^. Conclusions and some open questions for further research are 
provided in Section 

2 Information Theory, the Basic Compression Subroutine and Purification 
Levels 
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2.1 Shannon's bound 



Let us briefly describe the purification problem from an information theoretic perspective. There exists 
a straightforward correspondence between the initial state of our n-qubit system, and a probability dis- 
tribution of all n-bit binary strings, where the probability of each string i is given by the term Pi, the 
probability of the state \i) in the mixed state p'^^^-^^^ described by Eq.(^. A loss-less compression of a 
random binary string which is distributed as stated above has been well studied. In an optimal com- 
pression scheme, all the randomness (and hence, the entropy) of the bit string is transferred to n — m 
bits, while with extremely high probability leaving m bits in a known deterministic state, say the string 
0. The entropy H of the entire system is //(system) = nH{single — bit) = nH{l/2 + eo/2) with 
H{P) = — Plog2 P — {1 — P) log2(l — P) measured in bits. Any loss-less compression scheme pre- 
serves the entropy H of the entire system, hence, one can apply Shannon's source coding bound on m 
to get m < n[l — H{\/2 + eo/2)]. Simple leading-order calculation shows that m is bounded by (ap- 
proximately) -^^^n for small values of the initial bias eo, and in a practical compression scenario this can 
be achieved if a large enough string (large enough n) is used. Schulman and Vazirani [11] were the first 
to use information theoretic tools for solving the scaling problem, and they also demonstrated how to get 
very close to the Shannon bound, once n is very large. We consider here a bias of 0.01 and a bias of 
0.1, and with these numbers, the Schulman- Vazirani compression cannot be useful in practice, and can- 
not help in achieving NMR computing with more than 20 qubits in the foreseeable future. In fact, any 
entropy-preserving purification scheme cannot be useful for NMR computation in the near future. 

We suggest here an entropy-nonpreserving purification. Our purification, algorithmic cooling, has 
some common properties with the entropy-preserving purification, such as the basic compression subrou- 
tine and the purification levels. These are therefore described in the following. 



2.2 Basic Compression Subroutine and Purification Levels 

The Basic Compression Subroutine (BCS) is the simplest purification procedure used to convert a mixture 
with a particular bias ej, to one with a higher bias ej+i but fewer bits. We take pairs of bits and check 
if they are the same or different. One bit (the "supervisor") retains the information of whether or not 
they were the same. If they were the same, then we keep the other bit (the "adjusted" bit) and we say 
it is purified. This way we increase the bias or push the bits to a higher purification level. To realize 
this operation we use a Controlled-NOT (CNOT) transformation on a control bit (c) and a target bit (t): 
OcOt — > OcOt, Oclt — > Oclt, IcOf Ic^t, Iclt — IcOt. After the transformation, the target bit holds the 
information regarding the identity of the initial states of the two bits, hence it is the supervisor bit. If the 
target bit is after the CNOT operation between a pair of bits, then the pair had the same initial value and 
the control bit of the CNOT (the adjusted bit) is retained since it is purified, otherwise they were different 
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and the adjusted bit is thrown away since it got dirtier. In both cases, the supervisor bit has a reduced 
bias (increased entropy), hence it is thrown away. However, before being thrown away, the supervisor bit 
is used as a control bit for a SWAP operation: if it has the value "0", then it SWAPs the corresponding 
adjusted bit at the head of the array (say to the left), and if it is "1" it leaves the corresponding adjusted bit 
at its current place. In either cases the supervisor bit is then SWAPped to the right of the array. [Note that 
we use here a hybrid of English and symbol languages to describe an operation, such as SWAP or CUT.] 
As a result, at the end of the BCS all purified bits are at the first locations at the left side of the array, the 
dirty adjusted bits are at the center, and the supervisor bits are at the right side of the array. Thus the dirty 
adjusted bits and the supervisor bits can be thrown away (or just ignored). 

Starting a particular BCS on an even number rij of bits with a bias ej, at the end of the BCS there are (on 
average) n^+i purified bits with a new bias e^+i. The new length and new bias are calculated as follows. 
The probability of an adjusted bit being |0) in the purified mixture, i.e., (1 + ej+i)/2, is obtained by a 



1 + 



/2, 



direct application of Bayes' law and is given by: [1 + e^+i] /2 = p^^p^^ = ''^^^^^y2 
where the Pi are defined for a 2-bit string, so that Pqo = Pu = The new bias is 



2e,- 

j 

The number of purified bits, with the new bias e^+i is different on each molecule. Since, for 

each pair, one member is kept with probability Pqo + ^'ii = (1 + ej)/2, and the other member is thrown 
away, the expected value of the length of the purified string is 

^ 1 + e] 

nj+i = {^j+i) = —^^3- (8) 

Note that rij+i = (ej/2ej+i)nj. 

The number of steps in one such BCS is calculated as follows. There are nj/2 pairs. For each pair one 
CNOT operation is performed. Then, at most — 3 (that is, less than 2nj — 1) operations of controUed- 
SWAPs and SWAPs are performed to conditionally put the adjusted bit in the first location at the left of 
the array, or leave it in its current location: first, a controUed-SWAP is performed with the supervisor bit 
as a control, the adjusted bit and the bit to its left as the target. Then the SWAP operation is performed on 
the supervisor bit and the bit which is one location to its left. Then a controUed-SWAP is again performed 
to conditionally swap the two bits at the left of the supervisor bit, and again the supervisor bit is SWAPped 
one location to the left. These SWAP and controUed-SWAP operations are then repeated until the adjusted 
bit is conditionally SWAPped all the way to the first location of the array [the supervisor bit is at the 
third location in the array when this final controUed-SWAP is performed]. Finally, the supervisor bit 
is SWAPped till it reaches the previously used supervisor bit. At the end of these operations all used 
supervisors are at the right of the array, all purified adjusted bits are at the left of the array, and all the 
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adjusted bits which got dirtier are to the right of the purified adjusted bits. Considering controlled-SWAP, 
SWAP, and CNOT as being a single operation each (hence one time step each), we obtain a total of 



Tbcs < (2n,)(n,/2) = n/ (9) 

time steps for a single BCS operation. Actually, even if each controlled-SWAP is considered as two time 
steps this bound still holds, once a more tight bound is calculated. 

A full compression scheme can be built by repeating the BCS several times, such that the first appli- 
cation, Sjo^i}, purifies the bits from eo to ei, and the second purification, S{i^2}> acts only on bits that 
were already purified to ei, and purifies them further to €2- The j^^ application, purifies bits 

from ej_i to ej. Let the total number of BCS steps be jfinai = J/ and let the final bias achieved after jf 
applications of the compression be e^g^^j = ej. By iterating equation we calculate directly ej^^^^j when 
starting with eo = 0.01 or eo = 0.1, and after jgnai application of BCS. Then, using ^gnai = (1 — efinai)/2, 
and Eq.(^) with m purified bits, we estimate the number of bits m for which a scalable PPS technique 
can be obtained. The results are summarized in Table 1. The first interesting cases within the table are 
eo = 0.01; jf = 6, or eo = 0.1; jf = 3, allowing up to m = 50 bits. We refer to these possibilities as a 
short term goal. As a long term goal, up to 200 bits can be obtained with eo = 0.01; jf = 7, or eo = 0.1; 
jf = 4. We consider cases in which the probability p of the pure state is less than 10^^ as unfeasible. 

When only the BCS is performed, the resulting average final length of the string is m = nj^ = 
{ejj-i/2ejj)nj^^i = {ej^. /2^f eo)nQ, so that the initial required number of bits, no, is huge, but better 



compression schemes can be designed [11], which approach the Shannon's bound. However, for our 
purpose, which is to achieve a "cooling via polarization-heat-bath" algorithm, this simplest compression 
scheme is sufficient. 



3 Algorithmic Cooling via Polarization-Heat-Bath 

3.1 Going Beyond Shannon's Bound 

In order to go beyond Shannon 's bound we assume that we have a thermal bath of partially polarized bits 
with a bias eo. More adequate to the physical system, we assume that we have rapidly-reaching-thermal- 
relaxation (RRTR) bits. These bits, by interaction with the environment at some constant temperature Pq, 
rapidly return to the fixed initial distribution with bias of eo (a reset operation). Hence, the environment 
acts as a polarization heat bath. 

In one application of the BCS on bits at a bias of ej, some fraction / (satisfying 1/4 < / < 1/2) is 
purified to the next level, e^+i while the other bits have increased entropy. The supervisor bits are left with 
a reduced bias of e^^, and the adjusted bits which failed to be purified are changed to a bias e = 0, that is, 
they now remain with full entropy. 
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To make use of the heat bath for removing entropy, we swap a dirtier bit with an RRTR bit at bias eo, 
and do not use this RRTR bit until it thermalizes back to eo- We refer to this operation as a single "cooling" 
operation [Q]. In a nearest-neighbor gate array model, which is the appropriate model for NMR quantum 
computing, we can much improve the efficiency of the cooling by assuming that each computation bit has 
an RRTR bit as its neighbor (imagine a ladder built of a line of computation bits and a line of RRTR bits). 
Then k cooling operations can be done in a single time step by replacing k dirty bits with k RRTR bits in 
parallel. 

By applying many BCS steps and cooling steps in a recursive way, spins can be refrigerated to any 
temperature, via algorithmic cooling. 



3.2 Cooling Algorithm 

For the sake of simplicity, we design an algorithm whereby BCS steps are always applied to blocks of 
exactly m bits (thus, m is some pre-chosen even constant), and which finally provides m bits at a bias e^^ . 
Any BCS step is applied onto an array of m bits at a bias ej, all purified bits are pushed to the head of the 
array (say, to the left), all supervisor bits are swapped to the back of the array (say, to the right), and all 
unpurified adjusted bits (which actually became much dirtier) are kept in their place. After one such BCS 
step, the m/2 bits at the right have bias of e^^, the purified bits at the left have a bias e^+i, and to their right 
there are bits with a bias zero. Note that the boundary between the purified adjusted bits and the dirtier 
adjusted bits is known only by its expected value (>Cj+i) = m. By repeating this set of operations 

£ times (as explained in the following paragraphs), with ^ > 4, an expected value = m 

of bits is obtained, from which the first m bits are defined as the output bits with e^+i, and the rest are 
ignored. If an additional purification is now performed, only these first m bits are considered as the input 



for that purification. We refer to £ as the "cooling depth" of the cooling algorithm [13]. 

The algorithm is written recursively with purification-steps Mj, where the j^^ purification step cor- 
responds to purifying an initial array of A'^ bits into a set of m bits at a bias level of ej, via repeated 
compression/cooling operations described as follows: In the purification step Mq we wish to obtain m bits 
with a bias eq. In order to achieve this we SWAP m bits with m RRTR bits, which results in m cooling 
operations performed in parallel. The number of bits required for AIq is Nq = m. In one purification step 
Mj+i (with j > 0) we wish to obtain m bits with a bias ej+i. In order to achieve this goal we apply £ 
purification steps Mj, each followed by a BCS applied to exactly m bits at a bias ej. First, Mj is applied 
onto Nj bits, yielding an output of m bits at a bias ej. A BCS is then applied onto these bits, yielding a 
String of expected length ('Cj_(_i) = m bits purified to a bias e^+i and pushed all the way to the left. 
At the end of that BCS all the m/2 supervisor bits are located at positions m/2 + I until m. Then Mj is 
applied again onto an array of Nj bits, starting at position m/2 + 1. This time all BCS operations within 
this second application of Mj push the bits to the relative first location of that Mj array which is the loca- 
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tion m/2 + 1 of the entire string. [In the case of j = 0, of course, there are no BCS operations within Mq.] 
At the end of that second Mj application, a BCS is applied to m bits at a bias ej (at locations m/2 + 1 till 
m/2 + m), purifying them to Cj+i. The purified bits are pushed all the way to the left, leading to a string 
of expected length {C^jj^^ = '^—^ At the end of that BCS all the m/2 supervisor bits are located at 
positions m + 1 till 3m/2. Then Mj is again applied onto an array of Nj bits, starting at position m + 1. 
All BCS operations within this third application of Mj push the bits to the relative first location of that Mj 
array (the location m + 1 of the entire string). At the end of that third Mj application, a BCS is applied to 
m bits at a bias ej (at locations m + 1 till m + m), purifying them to ej+i, and the purified bits are pushed 
all the way to the left. This combined Afj-and-BCS is repeated i times, yielding {C^j^-^) = m bits 

purified to e^+i. For ^ > 4 we are promised that (^j+i) > m, and a CUT operation, Cj+i, defines the first 
m bits to be the output of M^+i. 

The total number of bits used in Mj^i is Nj^i = {£ — l)m/2 + Nj bits, where the Nj bits are the 
ones used at the last Mj step, and the {i — l)m/2 bits are the ones previously kept. The output of Mj^i 
is defined as the first m bits, and in case Mj_|_2 is to be performed, these m bits are its input. Let the total 
number of operations applied at the j^^ purification step, Mj, be represented as Tj. Note that Tq = 1, 
meaning that m bits are SWAPped with RRTR bits in parallel. Each application of the BCS has a time 
complexity smaller than m^ for a near-neighbor connected model (^. When the fc*^ cooling is done (with 
k e {!,... , i}) the number of additional steps required to (control-)SWAP the adjusted bit at the top of 
the array is less than 2{k — l)m. Thus we get Tj+i < Ylk=i[i'^{^ ~ ^i"* + 2m)(m/2) + Tj]. Hence, for 
allj, 

r,+i < ^[km'^ + Tj] = ^^t^rn'^ + iTj. (10) 

k=l 

The purification steps Mi and M2 can be obtained by following the general description of Mj+i. For 
clarity. Mi is described in Figure 1, M2 is described in Figure 2 in appendix |b], and both Mi and M2 are 
described in words in that appendix. For the entire protocol we choose jfinah and perform M^^ starting 
with Nj^. = n bits, and we end up with m bits. 

To emphasize the recursive structure of this algorithm we use the following notations. [B^f^_i-f^j.j] — 
the BCS procedure purifying from e^-i to (followed by moving the purified bits to the relevant starting 
point). [S] — SWAP m bits with the RRTR. [Cj] — CUT, keep the first m bits from the starting point of the 
sub-array of the bits with a bias ej. Then, Mq = S, and for j G {1, • • • ,jf} 

^3=^3 ^{{k-l)^k}Mj-l ■■■ 5{(fc_i)^A:}A/,-l 0{(A;-l)^fc}M,_i , (11) 

^ V ' 

I times 

is the recursive formula describing our algorithm. 
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A full cooling algorithm is Mjj, and it is performed starting at location = 0. A pseudo-code for the 
complete algorithm is shown in Figure |5[ For any choice of edes> one can calculate the required (mini- 
mal) jf such that ejj, > e^^s^ and then m bits (cooled as desired) are obtained by calling the procedure 
COOLING (jfinah ^,i,m), where £ > 4. We actually use £ > 5 in the rest of the paper (although £ = 4 is 
sufficient when the block's size m is very large) in order to make sure that the probability of a successful 



process does not become too small. [The analysis done in [11] considers the case in which m goes to 
infinity, but the analysis does not consider the probability of success of the purification in the case where 
m does not go asymptotically to infinity; However, in order to motivate experiments in this direction, one 
must consider finite, and not too large blocks, with a size that shall potentially be accessible to experimen- 
talists in the near future. In our algorithm, the case of £ = 4 does not provide a reasonable probability of 
success for the cooling process, but £ = 5 does]. 

3.3 Algorithmic Complexity and Error Bound 
3.3.1 Time and Space Complexity of the Algorithm 

We now calculate Nj = n, the number of bits we must start with in order to get m purified bits with bias 
ej^. We have seen that A^o = mandA'j = -^m + Aj-i, leading to A'j = + l) m, and in particular 

% = (^^^Jfinal + l^m. (12) 

Thus, to obtain m bits we start with n = cm bits where c = ^^jfinai + 1 is a constant depending on the 
purity we wish to achieve (that is, on j'finai) and on the probability of success we wish to achieve (that is, 
on £). For reasonable choices, jj in the range 3 — 7 and £ in the range 5 — 7, we see that c is in the range 
7 — 22. To compare with the Shannon's bound, where the constant goes as 1/eo^, one can show that here 
c is a function of 1/ log eo- 

As we have seen in Section 3.2, the total number of operations applied at the j^^ purification step. 



Mj, satisfies Tj < ^-^^^rn^ + £T.j_i. Writing d = m'^[£{£ + l)]/2, the recursive formula leads to 
Tj^ < PfTo + dEjCo^ = + d[^^f - - 1]- After some manipulations we get 

Tj^ < m^ff+^. (13) 

This bound is not tight and a tighter bound can be obtained. It is also important to mention that in a 
standard gate-array model (and even in a "qubits in a cavity" model), in which SWAPs are given almost 
for free, an order of m instead of is obtained. 

Let the relaxation time Ti of the computation bits be called Z:omput-bits> and the relaxation time 71 
for the RRTR bits be called Trrtr- Note that the dephasing time, T2, of the computation bits is irrelevant 
for our algorithm, and plays a role only after the cooUng is done. 
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With the short-term goal in mind we see that m = 20 can be achieved (for £ = 5) with eo = 0.01, 
jf = 6, Tj^ < 3.1 X lO'^ steps, and n = 260 bits, or with eo = 0.1, j/ = 3, Tj^ < 250,000 steps, and 
n = 140 bits. Increasing m to 50 only multiplies the initial length by 2.5, and multiphes the time steps by 
6.25. Thus, this more interesting goal can be achieved with eo = 0.01, j/ = 6, Tj^ < 1.9 x 10*^ steps, and 
n = 650 bits, or with eo = 0.1, jf = 3, T,-^, < 1.56 x lO^^ steps, and n = 350 bits. 

Concentrating on the case of jj = 3 and eo = 0.1, let us calculate explicitly the timing demands. 
For m = 20 bits, we see that the switching time %„itch must satisfy 250, 000 Switch Ziomput-bits 
in order to allow completion of the purification before the system spontaneously relaxes. Then, with 

= 400 time steps for each BCS operation, the relaxation time for the RRTR bits must satisfy Trrtr ^ 
400 T^witch, if we want the RRTR bits to be ready when we need them the next time. As result, a ratio 
of ^omput-bits ^ 625 Trrtr is required in that case. The more interesting case of m = 50 demands 
1.56 X 10^ Ts^itch <■ ^comput-bits, Trktr < 2500 7;„itch, and '7;omput-bits » 625 Trrtr. Note that 
choosing i = 6 increases the size by a factor of 5/4, and the time by a factor of 6^/5^ 2. We shall 
discuss the possibility of obtaining these numbers in an actual experiment in the next section. 



3.3.2 Estimation of error 

Since the cooling algorithm is probabilistic, and so far we have considered only the expected number of 
purified bits, we need to make sure that in practice the actual number of bits obtained is larger than m 
with a high probability. This is especially important when one wants to deal with relatively small numbers 
of bits. We recall that the random variable Cj is the number of bits purified to ej, after the k^^ round 
of purification step-Mj_i each followed by Hence, prior to the CUT Cj we have Cj bits 



with bias ej, where the expected value = i — m > and we use i > 5. Out of these bits 
we keep only the first m qubits, i.e., we keep at most a fraction | of the average length of the string of 
desired qubits. Recall also that Cj is a sum of independent Bernoulli random variables, and hence one can 
apply a suitable form of the strong law of large numbers to determine the probability of success, i.e., the 
probability that Cj > m. 

The details of applying a law of large numbers are given in appendix ^. Here we only state the result. 
Chernoff's bound implies that the probability of failing to get at least m bits with bias ej is 



£m 



Pr 



q < m 



< exp 



-m 



exp 



{i - 4)^ 



-m 



For the probability of success of the entire algorithm we have the following conservative lower bound 



Pr [success of the algorithm] > 



, (£ - 4)2 
1 — exp I — — m 



(14) 
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The probability of success is given here for several interesting cases with jf = 3 (and remem- 
ber that the probability of success increases when m is increased): For m = 50 and £ = 6 we get 
Pr [success of the algorithm] > 0.51. For m = 50 and £ = 5 we get Pr [success of the algorithm] > 
2.85 X 10^^ This case is of most interest due to the reasonable time scales. Therefore, it is important to 
mention here that our bound is very conservative since we demanded success in all truncations (see details 
in appendix and this is not really required in practice. For instance, if only m — l bits are purified to ei 
in one round of purification, but m bits are purified in the other £ — 1 rounds, then the probability of having 
m bits at the resulting M2 process is not zero, but actually very high. Thus, our lower bound presented 
above should not discourage the belief in the success of this algorithm, since a much higher probability of 
success is actually expected. 

4 Physical Systems for Implementation 

The spin-refrigeration algorithm relies on the ability to combine rapidly relaxing qubits and slowly relaxing 
qubits in a single system. Tl lifetimes of atomic spins in molecules can vary greatly, depending on the 
degree of isolation from their local environment. Nuclei that are positioned close to unpaired electrons, for 
example, can couple strongly to the spin of these electrons and decay quickly. Identical nuclei that are far 
removed from such an environment can have extremely long lifetimes. Many examples of Tl varying over 
three orders of magnitude, from seconds to milliseconds, exist in the literature. One example is the ^'^C 
nuclear relaxation rate, which changes by three orders of magnitude depending on whether the ^•^C atom 
is part of a phenoxyl or triphenylmethyl radical |^. By combining these different chemical environments 
in one single molecule, and furthermore, by making use of different types of nuclei, one could hope to 
achieve even a ratio of 10^. 

Another possible choice is to combine the use of nuclear spins and electron spins. The coupling be- 
tween nuclei and electrons that is needed to perform the desired SWAP operations, has been well studied 
in many systems by the Electron-Nuclear Double Resonance (ENDOR) technique[^. The electron spins 
which typically interact strongly with the environment could function as the short lived qubits, and the 
nuclei as the qubits that are to be used for the computation. In fact, the relaxation rate of electrons is 
commonly three orders of magnitude faster than the relaxation rate of nuclei in the same system, and an- 
other order of magnitude seems to be easy to obtain. Note also that the more advanced TRIPLE resonance 
technique can yield significantly better results than the ENDOR technique [|l5|]. 

This second choice of strategy has another advantage — it allows initiation of the the process by 
SWAPing the electron spins with the nuclear spins, thus getting much closer to achieving the desired 
initial bias, eo = 0.1, which is vital for allowing reasonable time-scales for the process. If one achieves 
^omput-bits ~ lOsecs, and Trrtr ~ Imillisecs, then a switching time of lOmicrosecs allows our al- 
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gorithm to yield 20-qubit computers. If one achieves Ziomput-bits ~ lOOsecs, and Trrtr ~ lOmillisecs, 
then a switching time of ^ lOmicrosecs allows our algorithm to yield 50-qubit computers. 



5 Discussion 

In this paper we suggested "algorithmic cooling via polarization heat bath" which removes entropy into 
the environment, and allows compression beyond the Shannon's bound. The algorithmic cooling can solve 
the scaling problem of NMR quantum computers, and can also be used to refrigerate spins to very low 
temperatures. We explicitly showed how, using SWAP operations between electron spins and nuclear 
spins, one can obtain a 50-qubit NMR quantum computer, starting with 350 qubits, and using feasible 
time scales. Interestingly, the interaction with the environment, usually a most undesired interaction, is 
used here to our benefit. 

Some open questions which are left for further research: (i) Are there better and simpler cooling 
algorithms? (ii) Can the above process be performed in a (classical) fault-tolerant way? (iii) Can the 
process be much improved by using more sophisticated compression algorithms? (iv) Can the process be 
combined with a process which resolves the addressing problem? (v) Can one achieve sufficiently different 
thermal relaxation times for the two different spin systems? (vi) Can the electron-nuclear spin SWAPs be 
implemented on the same systems which are used for quantum computing? Finally, the summarizing 
question is: (vii) How far are we from demonstrating experimental algorithmic cooling, and how far are 
we from using it to yield 20-qubit, 30-qubit, or even 50-qubit quantum computing devices? 
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Figure 1 : The purification step Mi . 
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Figure 2: The purification step M2. Tlie details of tlie operations of Mi on tlie second level are shown. 
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procedure COOLING (j, /j,, i, m) 



(comment: this procedure returns m bits with bias ej starting from the bit in position /x; ^ 
is the cooUng depth) 

begin if j = then do 

can SWAP (/x,m) 

else do 
begin 

for depth = to ^ - 1 do 
begin 

call COOLING (j - 1, /i + (depth) * \m, £, m) 
call BCS (/X + depth * ^m, //) 
end 

end 

end 

procedure BCS (u, uq) 



begin 

Apply the BCS to the m bits starting at location u, and push the purified bits always 
to the location uq (where, <v). 

end 

procedure SWAP (/x, m) 



begin 



Perform a cooling operation by swapping the bits at location ix Xo + m — 1 with 
the RRTR bits and thus resetting their bias to eo- 



end 



Figure 3: A pseudo-code for the coohng algorithm. 
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jf 








^f- 2 


m = 20 


m = 50 


m = 200 


0.1 





0.1 


0.45 


6.4 xlO"^ 


unfeasible 


unfeasible 


3 


0.666 


0.1672 


2.6 xlQ-^ 


1.1 xlO"^ 


unfeasible 


4 


0.922 


0.0388 


4.5 xlO-i 


1.3 xlO"^ 


3.7 xlO-*^ 


0.01 





0.01 


0.495 


1.2 xlO"^ 


unfeasible 


unfeasible 


6 


0.565 


0.2175 


7.4 xl0~3 


4.7 xlO"^ 


unfeasible 


7 


0.856 


0.0718 


2.2 xlO-i 


2.4 xlO-2 


3.4 xlO-^ 



Table 1: Feasibility of running an n-qubit NMR computer, when the polarization bias is improved to e/, 
prior to using the PPS technique. 
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A PPS technique and the scaUng problem 



To illustrate the PPS scheme, let us first consider the case of n 
initial state is given by equation (|l|) [with e replacing eo], 



1 qubits, with an arbitrary bias e. The 



(l + e)/2 
. (l-e)/2, 




- e)/2 
(l-e)/2, 



(15) 



where the second form is already in the form of a PPS, e|0)(0| + [(1 — e)/2\I. 

Let us now consider the case of n = 2 qubits. Since the initial state of each qubit is given by equation 
(p^), the density matrix of the initial thermal-equilibrium state of the two-qubit system can be represented 



as: 



Finit 



(l + 6)/2 \ /(l + e)/2 
^ (l-e)/2i I (l-e)/2, 



(16) 



For the purpose of understanding the PPS it is legitimate to ignore the difference between the e of the two 
spins, but in practice they must differ a bit, since the only way to address one of them and not the other is 
by using accurate fields such that only one level splitting is on resonance with that field. 
For the purposes of generating the PPS, it is instructive to represent the initial state as 



Pmit 



Poo + 



1 



1 

-Poi + — 



^ (1 

-/OlO + — 



-Pll, 



(17) 



4 ' ■ 4 ' ■ 4 ' ■ 4 

where pi = and i is being a binary string. The coefficient of each pi, say Pi, is the probability 

of obtaining the string i in a measurement (in the computation basis) of the two qubits. Thus, Pqo = 
(1 + e)^/4, Poi = -Poi = (1 - and Pu = (1 - e)^/4. In order to generate a pseudo-pure state, let 

us perform one of the following three transformations: Si = I (the identity). 



So 



|00) 
|01) 
1 10) 

111) 



|00) 
1 10) 

111) 

|01) 



s. 



1 00) 
|01) 
1 10) 

111) 



|00) 

111) 

|01) 
1 10) 



with equal probability, so that each molecule (each computer) is subjected to one of the above-mentioned 
transformations. This transformation can be carried out in an experiment by applying different laser pulses 
to different portions of the liquid, or by splitting the liquid into three portions, applying one of the transfor- 
mations to each part, and mixing the parts together. These permutations map |00) to itself, and completely 
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mix all the other states. As a result, the density matrix of the final state becomes: 



2 (l + e)2 i_(i + e)2/22 

Ppps = — ^2 — 2?'^ ^^^^ +PW + pn) 

(l + e)2-l i_(i + e)2/22 
= — 22~i — ^00 H 2^~i + + Pw + Pu) 

(l + e)2-l, ^, , 22-(l + e)2 

so that finally, p = ^^l^^l^i^ probability of having the pure state. Note that p is not Pqo since the 

completely mixed state also contains a contribution from Pqo- 

The above procedure for mixing can be directly generalized to a system comprising n qubits[]. The 
density matrix for the final state is: 



(l + eo)" , 1 - (1 + 6o)V2" ' 
pps - ^ ^oo...o + ^^-^ 2^ Pi 



1=1 



= " + ^°'"-^oo...o>(oo.^^o| + ^"-" + ^°>"i. 

2" - 1 ' ' 2" - 1 

The probability of the n bit pure state |00 • • • 00) is p = which is p (neo)/2" for small 

2™ — 1 

e, hence exponentially small with n. Obviously, such a signal is highly obscured by the completely mixed 
state, leading to an exponentially small signal-to-noise ratio, and hence, to the scaling problem. However, 
it is clear now that information is lost in the process, due to the mixing step: In order to obtain the PPS we 
need to "forget" the transformation done on each computer, and consider only the average result. 

In order to clearly see the inherent loss of information in the mixing process, consider an ensemble 
computer in its initial state, pj^ij. We note that one can perform any single qubit operation (and measure) 
on any of the n qubits without any purification. For example, if one were to measure any individual qubit 
in the ensemble when it is in its initial state, then one would observe a |0), irrespective of how large n 
is; similarly, one can perform single qubit rotations and then make measurements without any purification 
of the initial state. The same is not true if the rotation is applied to the PPS Ppp^', then the completely 
mixed state dominates, and the exponentially small signal is obscured. Unfortunately, performing 2-qubit 
computation (or more) with mixed states is not a realistic choice. To summarize, the PPS technique causes 
the problem of scaling, by losing information on purpose. 



'in practice, one might accomplish an approximate mixing instead, due to the exponential number of different rotations 
required for a perfect mixing. 
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B A detailed description of Mi and M2 



In the purification step Mi we wish to obtain m bits with a bias ei. In order to achieve this we apply i 
cooUng operations (SWAPs with RRTR), each followed by repeated applications of the BCS (acting on 
bits with eo bias). This is done as follows: The m bits at the head of the array (positions 1 to m) are 
SWAPped with RRTR to yield eo. Then, a BCS is appUed onto them, resulting in having £i purified bits at 
the left, unpurified adjusted bits next to them, and finally, the supervisor bits at the positions m/2 + 1 to m 
(the right locations of the m-bit-array). Then a similar set of operations is applied to an array of m bits at 
locations m/2 + 1 to 3m/2. This array includes all the supervisor bits of the previous operation plus m/2 
more bits. First, these m bits are reset to eo- When a BCS is applied onto these m bits, all purified bits are 
pushed to the left, but now it is a push to the head of the entire ei-bias string, all unpurified adjusted bits 
are kept in their place and all supervisor bits are pushed to the right of the m-bit array. Pushing the purified 
bits all the way to the left is vital, since we want to be certain that no unpurified bit remains among the 
purified bits. Let us denote the number of purified bits at the end of this step Cf where the superscript is 
added to indicate it is a count done after a second SWAP with RRTR. [Thus, the number of bits after the 
first SWAP with RRTR is renamed C\ .] The same set of operations is repeated £ times, and at its end the 
entire array used for Mi contains Ni = {£ — l)m/2 + m bits, where the m bits are the ones used at the 
last compression, and the {£ — l)m,/2 bits are the ones previously kept. Of these A'^i bits, {C\) purified bits 
are at the left, and m/2 dirty supervisor bits are at the right (remaining from the last application of BCS). 
The expectation value for the length of the purified bits satisfies {C\) = £^^^ m. Finally, we define the 
output of this purification step to be the first m bits at the left. Then, for £> A, {C{) > m. 

In the purification step M2 we wish to obtain m bits with a bias 62- In order to achieve this goal, we 
apply £ purification steps Mi, each followed by a BCS applied to exactly m bits at a bias ei: First, Mi is 
appUed onto Ni bits yielding an output of m bits at a bias ei, then a BCS is appUed onto these bits yielding 
a string of expected length (£3) = —4^ rn bits purified to a bias €2 and pushed to the left. Then Mi is 
applied again to an array of A^i bits, starting at the location m/2 + 1. This time all BCS operations within 
Ml push the bits to the first location of that array (the location m/2 + 1 of the entire string). At the end 
of the second Mi appUcation, a BCS is applied to m bits at a bias ei purifying them to 62, and the purified 
bits are pushed all the way to the left. Then Mi is applied a third time to an array of Ni bits, starting at 
location m + 1. This time all BCS operations within Mi push the bits to the first location of the array (the 
location m + 1 of the entire string). At the end of the third Mi application, a BCS is applied to m bits 
at a bias ei purifying them to £2, and the purified bits are pushed all the way to the left. This combined 
Mi-and-BCS is repeated £ times, yielding {C2) = £—^ m bits purified to €2. The total number of bits 
used in M2 is N2 = {£ — l)m/2 + Ni bits, where the Ni bits are the ones used at the last Mi step, and 
the {£ — l)m/2 bits are the ones previously kept. The output of M2 is defined as the first m bits. 
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C Probability of error in the algorithm 



We utilize the following form of the Chernojf's bound: If Xi, . . . ,Xtwe.t independent random variables 
with Vi{X.i = l)=p and Pr(Xj = 0) = 1 - ]5, then for X = H h we have 



Pr[X < tp{l - a)] < exp 



a^tp 



(18) 



In our case, the number of trials t, is £m. The probability of keeping a bit (so that Xj = 1) is p = 
(1 + ej_i^)/4 which is greater than 1/4. We set a = 1 — so that tp{\ — a) = m. Therefore, a > 1 — j. 



Now, using the fact that p > 1/4, Chernoff's bound ( [T8| ) implies that the probability to fail to get at least 

{£ - 4)2 



m bits with bias ej is 



Pr 



q < m 



1 



< exp 



-m 



exp 



-m 



In the complete algorithm that runs for jfinai purification steps, we need to calculate the total number 
of times the above-mentioned hard truncations aie performed and demand success in all0 of them. In 
other words, to get Cj purified bits at purification step Mj (from which m bits will be taken via another 
truncation) we first need to successfully provide £ times m-bit strings with bias ej_i. The recursive nature 
of our algorithm demands the successful purification of all m-bit strings with smaller biases e^, for all 
< A; < j, in order to achieve this goal for the Mj step. Let Cj be the number of all m-bit strings with 
biases smaller than ej, needed at the j^^ step. Recall that the m bits at eo are given with certainty, so only 
one successful truncation is required to get ei. Then 



Ci 



Hence, Cj = J2k=l = ffr- ^nd 



1, 



&f - 1 



(19) 



i-l - 

For the probability of success of the entire algorithm we demand success in all the Cj^ truncation processes 



Pr [success of the algorithm] > |^1 — Pr 

> I 1 — exp 



< m 



(i - 4)^ 



-m 



{e'f-i)/{e-i) 



This is a very conservative demand, so actually the probability of success is much higher than the one we calculate here. 
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